Audit Services

The Vendor is required to provide audit services for include:
• The audit plan for review and approval
• Conduct a readiness assessment to evaluate control documentation and processes and identify any potential gaps prior to the SOC 1 type ii audit.
• Report that includes but is not limited to the following:
• Date of the readiness assessment
• Description of the systems and processes reviewed
• Assessment results
• Identified risks
• Recommendations
• SOC 1 type ii audit in accordance with the institute of certified public accountants (AICPA) statement on standards for attestation engagements (SSAE 18) and related guidance
• Create a SOC 1 type ii audit report that includes but is not limited to the following:
• Audit dates
• Audit findings
• Risk assessment
• Recommendations.